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mm*! mmw 
m&m i ] 

ffllglglSS P V>«ig*lC#^$ *i£HH$^H^CD PP/STHS: 

#gPP/STp©gl«§$: L X mntt M<D PP/STli&gf 

[»#3C2] 

*j*5N*fc. ±*=LVT4mm£. t^raUf^ssii, -t^y^M* 
mto^ict y#*m*&#is««^ai&S£iJiu 

mmttmv pp/s t©^«i*^0>3b#£ si&^-ts 

1 SBS©i2^n- y S/X-^A^ff-^M^lCcf: y p p/stih$: e 
»£f£ U fjN*3C 2 mm<D± 3f n 'J-T-^ ^X^A^ff^^^lC j:'JPP/ST 

1 ffilE4# 2000-3059705 
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i mm<D±^-=L y ^ iy^^mtf^m^miz^x. 

i/^;i/*^M"srig3& r -r n > i: L/ 

pp/sT m<DMmm& & y y - mmm b pp/s T»ff*a*a» e> , ^ 
ftttmtmm&tf&z p p/s T#&i»pcy y -^e>#^«rigi: u 

5 ] 

[»#3(6] 

2 {iif#2000-3 0 59 7 0 5 



i 1 — 339304 



mmtt*. t=. ti e># * <Dma>ttfcm&fr*> p p / s t ogi^^0-gpt$. 

5#>TOg9# fcTh'J^f O £»S v h'Jy^^il M&f& U 

8 ] 

P P/S T#^i®@T*©ff«iIin##^>P P/ST«^$:, ISiMfMir- 

i ^vxb 3 vN-r*i^csH*©-fe^n. y ^x^A^tf-^m^tsicfc^ 
^^^ti^pp/sT$:Hi^-fe#a.u^w^fiiif^^icms!ibife mmmm^, © p 

P/ST»fllf^3iy4r y* h&^U iWRTIgtcf-S 
r £ fc-T £ "fe 3f a. U <r 4 2/ * ^ A« tf^8*&. 

[00 0 1] 
[$B^©M^<5i£*B£* 

^c«t5 < ^tf^^y - ;nc K-r -5 % © t* s o 

[0 0 0 2] 
[t£3fcCD&ffi] 

I SOI 54 0 8ttti^$ft$^t^aUf>f^ii$3=E>^7^ 
•^yy (Common Criteria, «TC C fcWP^tt, ft^^-^A^SgiSlCiftMi: 

W Jfe -fe * ^ y ^ >r *lfgM# £ * <z>*tBSK©#3EK#, 33 «fc 7 apg©«ffc 

3 tfiIE4# 2000-3059705 



4#32 1 1—339304 



[0 0 0 3] 

Engineer)^ Z.<D C CmfeMftfr £ &M<DMMm& ' S/X^AtC&JSfcMttS: 

[0 0 0 4] 
[0 0 0 5] 

[0 0 0 6] 
[0 0 0 7] 

2>ZHT*P P/ST<Dj&i&it*:3cmir2>nffit>K zfciiKT-f ■ xx • ^-/xx • 

2 7, 15? - 2 3 3 3, ^ K • 7*- • ^D^i/a> • • 
^i/3>7°D77>f;i/X-7>K-t^a'Jf'f^-^>yhX, 310. 8J£ (1999 
#7Jf ) (IS0/SC27 N2333 Guide for Production of Protection Profiles and S 
ecurity Targets Version 0.8, July, 1999) ^SC®?ffi#^^-fe^rrL V 4 

miso/iEc 15408-fe ^ ±-m%^wmmmmm®Mmmmm^^*=L v r 
4 -t? y * - i=m) ^26H*^ ^33M izmm 3 n x v ^ & „ 

[0 0 0 8] 

l <fc o a -t s mm] 

4 ffi|E# 2000-3059705 
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[0 0 0 9] 

M$tlfePP(O*t«0f?ffiiitlF«Mb, MPP^ 
[0 0 10] 

^PP^*©ST^*M^^©^S:tlM^ailLTS^J 
tf-^»*ffi& tJP**i6K:*^ 53i:?:B»iits„ 

[0011] 
[fgM£fi?&i-£fe#>(Z>#®] 

• gl§P P&tfP P775 'J-©#PPfe*^xjr MBfa^lM' y<D*zf*J*. 
V hf^Xt. VTmitt^ffl/SV/WDB (Data Base) 0 |Q 

• p p is© * ^^m^mmzm-D g^7^yj p p u p 

5 mi3E# 2000-3059705 
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P/PP77^ 'J-^'J-fMDB^, C CH#n h^C EM (Com 

mon Evaluation Methodology: C C^8a©^^fW3^)fN|flj=l > aK— * > h& 

3 > * > h |^<Z> ffimm& Kt£ V b fcCC (CEM) /PKGfgjgft DB^?,^ 

• **ai»^©K# pp/st ^±mn mu pp/st^©^ ^ ^m^g^ic* 

* y -#3§t*# p p / s t bfc n p p/ s t v u -*3g 

ftDB., 

PKG^il fc8SRCC/PKG*36'ffc DBfr&Ssfi n-^j • mm 
[0 0 12] 

• 385S©pp/sT^rt*««>»^«!ii:uT, mttttmm&' ^^^mm 
mm&* ##*/«f«i/tt«3Ky sz-tcBm-rs-fe^y ^-r am? (^^^ 

SCCM#n»K-*> hi^^j&^M&Sffi^ CCM#=i>jK-*> h^lcK 
^S^^^<D*flS*Ma5ia*^«iS*fiSy 7A7DB. 
[0 0 13] 

TPP/ST S:mei&#^M-rs^ai: lt«T5:^tS. 

77^'j-*;y -#^fcD Btn-MPP/STyi; -#^CD b ic&3$$ ft 

vm^&2>wzm-?2>T>( n y zmnrnfe-tzumm-tz pp/sts: etmsst 
u #ssaic^«g^bT^tf^©p p/sTODStMS:em^-rs#^o 

6 ffilE# 2000-3059705 
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[0 0 14] 

■jx^^nxh^) fttroflfHSt (^xbm'Mmm. »*y 

3 3f£©#j£;j3 J; 1^4 #©#j£*f JSi2 n. y <i S £#iEi-£3Mgo 

(CEM) /?KGffimit D B , J£?lCC/PKGfl|5tfb D B i> «£ Zfttfa J C'A'J'DB #f$K: J: 

y e i&^iei l t 5 * ol y ^ ^ n# few*-* S 

PP^M^ttCCIftit') £3t3lbfc«S&vhy y ^^*&a»*«feJ: 

• *«KlJK_h©#STff^*S tlfc PP/ST £CC(CEM)/PKG«titffcD B tC&|ft£ 
tlfe C C^tSff ^> CEMCPP/S TfFM g ffii l:f x ^ 'J X h ^T*^ 

»as»c^bfcpp/sTS:«s»«-r*#«. 

[0 0 15] 

7 ffiSE^ 2000-3059705 
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fcmm&mftcDPP/sTmz p p/s TmtfMM£'?z>m& • s/^Aajww 

«tf->^*© PP/ST MlfS © «fr£j&^ 
[0 0 16] 

#38fBti:, PP/STii»iJ:yMbfeIS - ^f^OMMI 

w«m £ . wa'jf-f am? » £ *r -t z> mmtt&ttfcmm z &m l &b 

[0 0 17] 

*fe, lilM*M7 ^ -f<-^^c^&i^$tlTv^spp/sTl¥$:^ilm•es^l 
- s«u'</b#»w»rtBfcy>f lt*3Su p p/ s Tm&mmm&zy 
y - s*iLfc#ip p / s t» »#ts*#*:0mtt#*«p p/s 
t»&«*^ y-j^&4#^nri6i:u #^^ti^pp/sTi¥©r-r=i>s:«i^ 

©BgiS^pp/ST^f,©tl^t^i$7#>h, ^x^-r;w 
^4 X^feBUtc <fc y iSg'JT*^ « <fc ? IC-T £ r i: 
[0 0 18] 

3f3.y^ B*©j^JR=l^ h^-$ ZZ&tlltXWtfi • MtU MiO'Uf 

8 aiSE# 2000-3059705 
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[0 0 19] 

m^, mmtt$Lt~izztib&*<Dm<DMmm&fr ?>pp/st ©fe«irt»(z>— 

£ fc, tifc PP/ST5: Hl^-fe ^a'Jf-f M#Sfctc3MJ§ LfrfflBmj& 

o 

[0 0 2 0] 

VJW-7 s -#'<-Xt.lsX. tiPPWPP775 U-5:PPimcD 
^^^<7)g6# P P / S T & Jiffi titPP/ST^©^5 ^mmH^lcS 

y y -*gs&-e&&r Lfco-^pp/sT^'j -flBSft^- z^-xt^ m 

9 ffiSE# 2000-3059705 
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h**?*- p itm&mmmmmmitT- # ^ - * ^ <& vm&m* u - 

j*<Dmmmmmizm&-?2>mm c^mm-mmm^-z^tj) /mm/mm 
jku */-&<Dtt&mmm&t.* &*&/im/mmtfv p-izmm-rz*** y 

[0 0 2 1] 

77^ , J-yJ-iIftf-^'<-^i:D-A^p p/st^ y-^gitft;-^-* 

T-m* l r=. wm±x*mm & & v> s r n > s £ K^t- & p p 

/ST?: £ INJUR U ##JWfctt^»mLT«&f*Nfc© PP/S T©«M«: Hifr 

1 0 ffilE# 2000-3059 705 
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itmm zMmmzmm. • m^xm^^rxom^-^mm^mm^m^ 

ffr&3 fife PP/ST feSHPffltfiflBUfc^- *s<-* JC«I«S tlfc«SES#^ 

o 

[0 0 2 2] 

fife, J:«»tf^J8^-^1f--^€:|i3Q i «j|S«45K:tt»iKW, -fr- 

9*ifrvxmmmteu-T-*^-xz.isxmmx%ziz*r3.VT4 s/x^Ata 

[0 0 2 3] 

p/pp7t5 y-yy-fcjfrffe-5 2 -- d-*app/st»;u-» 

1 1 ffifE# 2000-3059705 
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Azmftmmmm&z^itmfem&mmizmv. mm&mp p/pp77^j- 

fttttf-^&HISPPfi*«Wlc«W\ S&Jcg|S*H»tf-^«-9— tfx*- A 
[0 0 2 4] 

KTn->M©i2^r^LU^>r S/^-r^Ktraay-A/ 

So 

[0 0 2 5] 

#y-;w*, I^®PP/STM»i o i©Mt©fefe{c, ^P 

P/PP7T$'J-y'J D B i:CC (CEM) /PKGfiitft D B ©^IMlJg ■ ^ 

$i*Mfi38 £ , n-^PP/ST>yy- mmit DBt i&mccmm&it DBS 

<fctK*fjSy '7A'7DBilV\ofejiS<Z)PP/ST^^i:bt#e>inS^¥t 
#^©U-*^M§P®«^$:S?UM. t^ffiffltS?M/;'7A'7DB 10 2 

[0 0 2 6] 

0 6, ^D^A^D 2 1 9, SlM^MSi^IIS^t S C R T 

220, p p / sTmrnx^m^mm^mm • K2 2 

1, 7^2 2 2&tf3*ie>Affi;fr£M13?^£Am:frM?&2 2 3, $e>lCAffi 

1 2 ffi§E# 2000-3059705 
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^7, **ey, f-^'<-^A07i't^#yD^7AI:||!|TtSCPU2 24 
[0 0 2 7] 

0 SiPPMPP77$ y-&#PP8::*-^S?:i:* h 

t^7^y'J -*g3£T*# P P L fc&m PP/PP7t5'J-*;'J -*atft 
DB 2 0 1 CCMffn h^>CEM^«3>/K-*> h&tfglSA 

> Hlffl©M««K:fl!V^«»LfcCC(CEM)/PKG«3ifl:DB 2 0 2t, 

Ogg#P P/ST%JtiB£l^*£P P/STfS©*^X|&icW#&cS^£*^xy 

y-HIt^pp/ST&ftiWUfen-A^pp/sTyy-tiftDB 203 
**^snT^^v^fc»|»e^f^^D^^:3R3£^ftbfccc5l#^>d<--*>^ 

^PKG V fct£8RCC/PKG*3if t D B 2 0 4 £ „ m&O PP/ST fM^M 

«/Jfi«3KU Sz-CHSt-t WaUf-f SfHS h / U ;* * gMfiMB^ 

*«»a&«»Lfe^J»y 2 0 5 

[0 0 2 8] 

7"n^7A^ : E , J2 19{;H f-^^-X2 0 6©iiM-Si$: 
«»"r&fP« • y tf^tf««*«1H»»2 0 8. P P/ST k*3.*> hggmM 
3I3P2 0 9, SMi^MP p aim* • ^ilffiAiaf2 1 0, jgflUSi 
$S/M£M*&M5 2 1 1, 3R4K^B83E&*&SflS2 1 2, JKIB*(ft£«LJIflS2 

1 3, B&-*ccmftmwkmmB2 14, cci^^jsim§2 1 5 
. pp/sTK^^>b <z>£& • «g jfe • &&#mo>mw z?z> &.m/#&mw 

m2 1 8#«ttS*lTV**. 



1 3 
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[0 0 2 9] 

*mw^&2>±*^VT>( ^^A^ff-jfcMy-^Mcfcv^pp/ST 

0 3 , m 4 tt^^CD^tf-^Jg^ -^/5:ftJM bfc PP/S Tffr£flt3i©firf£ y 

[0 0 3 0] 

TsTVZfZ 0 1: 

5pJM#tt® 5{Cat-TCRT 2 2 0_t©^#f£My-;i'<Z>-7 ; -#'<-*2 0 6© 

I®pp/pp77^ y-#3ifl:DB 201. n-MPP/STyy-«ift 

DB 2 0 3 &|fc#LT»#WWJL*j3*3*LSP P/STf^U- hM*#WT 

n^4 o i icfcv^, p p/s Tia©*ijfcWfl*«:*3KLfc , y y — jg5£T?#jiB*a* 

$ns^ti^D - p p / s Tassr >f a > 4 o zzm&mmiiis 

TV?* 2 2 2 IC «fc *J y y& FD v ^Ift^Tf • 

©«/&@4 0 3 ^MtS. 
[0 0 3 1] 

liPP/pP77^ 'J-iMDB 201, a-*;i/PP/ST^/y-ffifjg 

ftDBKtt, i&3k\Z&m - tfM££*lfcP P/ST^P P/STW©«*.y y-W 

mzm^ x±& p p / s t & /K>f > # - t? i; > ? u - ^;«5tTis^ £ tir 

£ U, ^-r-^WCfct&P P/S T©^K{CfB«3*lfcP P£#> ^-SJsVflt 
»ffH*»&«*PP/ST»aa*, fg|El"<;K PP/STK^>h7 

[0 0 3 2] 

PP/STSS7>f3>4 0 2tt. Z.OmtM2t<DP P/ST&ffiilMUls'OV 

mm*m^Tmmt<ti. yv _L&pp/sT>K-f >#-y 

[0 0 3 3] 

1 4 m§E# 2000-3059705 
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[0 0 3 4] 

m5<D^t)lZUUU^<JV4 (EAL4) <D I C^J— Fi/X^rMi&WtlftttMt.-? 
2>M&. liPPf^^U- hfrbMmmmthXE AL4©I C;fc- KPP4 
04, ICA-K';-^/7>f^- (R/W) PP4 0 5» D-A^PP 
f>^l/-h^e>EAL4®*A^a«*PP4 0 6 5r^H^i:LT^-rS 

[0 0 3 5] 
0 2 : 

m&mftf8.&.. f>^i^-h^rn^w>4 o 7£jtpT-rsi:jg#i 

1 Otf^M • y ^7N^«##M#SP2 0 8 0 6©^# 

PP/PP77^'J-iiftDB20 1, U-JjJIP P/ST»;'J-ilftDB 

&fftsn i/tm £*ifcpp/sT <z>#3e®£ms & %9 • u %m/ 

*a%W»«P2 1 81CJ: »J06©«fce>&P P/ST K*:x*> httM1S5 01± 
[0 0 3 6] 

filPPJ:»jaaSbfc£lMtt#-;i/Kt^5 0 2, D-^l/PP/S 
[0 0 3 7] 

7^fUfl5PPfimiCtt^PPi:UT^b^:=fe»©©*«)PPMJi& ( 

ppm, rt-t?3>mm. #&f?B) 5 04?:ii-sm. 

[0 0 3 8] 

dlJUC J; y, ge#P P/ST*M?:Iit UT^if*f#acW-rs PP/STI 
m# © Ifr 3 ti t=. z. i: £ & s o 

[0 0 3 9] 
^f i yy3 0 3 : 

ffi^J^tLfcP P/STM^tC^fbT l~3*(5D^«lrt^$: K3f a. * > hS!^ 

15 ffiSE#2 0 0 0 - 3 0 5 9 7 0 5 
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mm 2 o 9 iz £ y ftmrnzmm - miE-tz lit: %Kmmmf&mmizttv Tit, v 
-)b*-=L- e o i om&mm&.mcm^ o 2 tzWR. mmms.mcm.9mm 

2 1 1 \Z& VMJ&S fA^DB 2 0 5CD®8tC^-Tcte)^^iim-^^^ 

[0 0 4 0] 
^3 0 4 : 

6 0 1 <Z>«f%-» aetSSHI 6 0 3j8|RK:J: U, «#-»B«aSJMB. 
31»21 2*«3*©SHrt«^fe*««/Kfai/j|a«jKU tf/WD 
B 2 0 5©Sjt4»— B*tf3-J5&*7 0 2i0;J:yt^a'Jf-f BWcSSjJIU 4 3j£ 

[0 0 4 1 ] 

^t=.toizm±?*£ i &m^ft&mmKMfa?&ftmBm(DM&£>'& ( ^ -t;w\° 

X-ttrb lWL&* 0 8 CD 7 0 3 0#MMi*^^Mf g^t*> Z<DW,&2 
[0 0 4 2] 

#*a*S*l*-aK- K2 2 lT?#j£B««:A:fcL«#-B«**/£*7 0 2 Still 
[0 04 3] 

*r«#tf©SW5B*)£l&au «*S«f^»*FTA(Fault Tree Anal 

ysis)y-)vnmmvx. &mzm±mm£-tzFT$:ftf&{sTm±mmizm-? 

1 6 ffiIE# 2000-3059705 



1 1 — 339304 



[0 04 4] 

7,^ry-?3 0 5 : 

>y-;i/^ -ol-6 0 1 ©Il@Mt6 0 4©7 : - ; 5!^6 0 5 £jg#L #3® 
B_*»£4ra*2'l 3lC£y*fjS/^?PB 2 0 5©#^-^*7 04, f 
SgziX h^-#*7 0 5^T*^*>f Tn^^$tl-5 3*^g|#^©^flS^, 

[0 0 4 5] 

mm* ax u m±mm<Dm$immmftmnzmft-t & r ^ ic £ y ««f »jc*«> 

[0 0 4 6] 

^f*;^3 0 6 : 

y-;i,*-rL-6 0 KZ>4BSg«^6 0 4<DB^mm^tmWe 0 6 5:11?, 
«^g^^S^2 1 3 ICJ: UH90J:9lC^rnmTt8 0 1 

DB 2 0 5 0fif-*S7O4, MSS^* h^-#3t7 0 5 tt5flT?S[ff^ff L 
[0 0 4 7] 

^JtffiJ^T © U ^ * £ £ 5 % © £ I, Ttt Jft ft**" S U X ^ 

«U M«=ixh<z>»3fti&^iSJeilTK:J¥ait*3Xh«!llSlt, j*m$*ifcv^# 

•«© y * * »*& t *f * n * h nfD© t ttnmm 

( Jfcsp 1 -£?|#M3c i: ^*»ffl ©»3ftl*««/jN £ 5 ) &*B3£-t*y^^^n^h 

1 7 ffiSE# 2000-3059705 
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[0 0 4 8] 

ztuz&mp p zmrnvrmMP p/st ^Mtsi^, sipposiw 
m^m^^^^it^^^Kimmmpp^n^m^^mmmmp pm 

Hfcfe&lUlifci-S.. 

ZLCD^tt«^fl:?g#itf{c^P P#M8¥l&«rW©* yfe>y-^a^J(Ci: 
[0 04 9] 

mz.ix. 3$0titit, T-i (m&mm ; o.i, mmm^m ; ioooooooo 

R, U ; 10000000R) , T-2 ($&£?tsp ; 0.1, mwm&M ; 50000000 R, 

UX^'fit ; 5000000 R) „ T-3 ; 0.2,^#^^ ; 5000000R , V X 

; 1000000R) , T-4 (^5S^ ; 0.01, ; 10000000 R, U X* 

ffl ; 100000R) 4f©IHi:lt, O-l (*f?|n^ h ; 1000000R) 

. 0-2 (jtfmnx h ; 100000R) , 0-3 (2*^=1* h ; 200000R) , 0-4 
Wm^X h ; 300000R) „ 0-5 (^3^ h ; 200000R) , 0-6 (*ffK=l 
* ; 150000 R) . 0-7 (*fm=lX h ; 400000R) , 0-8 OTnX h ; 60 
O000R) , 0-9 (ffnx h ; 1000000R) ,0-10 (M^=IX h ; 800000 
R) tfmvfbfr. T-lJC*f'rSB*j|B#*>*^ (O-l, 0-2) (0-3) 
„ T-2lC*j"TSg^-a-t)-&^ (0-4, 0-6) (O-l, 0-5). T- 
3lzM~?Z>BmM&t>Htf (0-2, -3) (0-7), T-4K*ff5gtljSfi 
(O- 8, O- 9) (O-IO) T*feSi:tS 0 



1 8 



ffifEtf 2000-3059705 
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[0 0 5 0] 

iooooo r & «j£ b t #m b mm^mm z mft -rzt. *fj^^ m &4t =100000 

R«fc*J#^T-4^U X^ffi = 100000RCDfc»*f^^e>ga^ ZltUCilfc&VAT 

0-9, O- 1 Ofcffi<D#j££Wi*l,fcVx£to#i^!b 

tot, m*)<DT- ©#J££«/Jn©:3* M'^ffttSO- 1 —O 

[0 0 5 1] 

mi] 

m 

Minimize: Z = ZC (q) -obj(q) (WL 1 ) 

a=1 

[0 0 5 2] 
[0 0 5 3] 

[ffc2] 

n P k 

1—1 I I TT obi (q) = 0 - G&2) 

[0 0 5 4] 

[&3] 

obj ( q ) o}, (i ; mm, o ;^um) - (&3) 

[0 0 5 5] 
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